You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2541 lines
159 KiB
2541 lines
159 KiB
{
|
|
"algorithms": {
|
|
"GradientBoostingRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LinearRegression": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
},
|
|
"LogisticRegression": {
|
|
"accuracy": 0,
|
|
"f1_score": 0,
|
|
"modelId": "",
|
|
"precision": 0,
|
|
"recall": 0,
|
|
"recommended": false
|
|
},
|
|
"RandomForestRegressor": {
|
|
"RMSE": 0,
|
|
"modelId": "",
|
|
"rSquared": 0,
|
|
"recommended": false
|
|
}
|
|
},
|
|
"description": "",
|
|
"enabled": true,
|
|
"entity_rules": [],
|
|
"key": "da-itsi-cp-microsoft-exchange-msexchange-transport-availability",
|
|
"kpis": [
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "1",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": 0.999,
|
|
"anomaly_detection_training_window": "-7d",
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-availability)`",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "",
|
|
"field": "",
|
|
"object": "",
|
|
"owner_field": ""
|
|
},
|
|
"datamodel_filter": [],
|
|
"datamodel_filter_clauses": null,
|
|
"description": "",
|
|
"enabled": false,
|
|
"entity_filter_field": "",
|
|
"entity_split_field": "",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#B50101",
|
|
"severity_color_light": "#E5A6A6",
|
|
"severity_label": "critical",
|
|
"severity_label_localized": null,
|
|
"severity_value": 6.0,
|
|
"threshold_value": 0.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#F26A35",
|
|
"severity_color_light": "#FBCBB9",
|
|
"severity_label": "high",
|
|
"severity_label_localized": null,
|
|
"severity_value": 5.0,
|
|
"threshold_value": 20.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FCB64E",
|
|
"severity_color_light": "#FEE6C1",
|
|
"severity_label": "medium",
|
|
"severity_label_localized": null,
|
|
"severity_value": 4.0,
|
|
"threshold_value": 40.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#FFE98C",
|
|
"severity_color_light": "#FFF4C5",
|
|
"severity_label": "low",
|
|
"severity_label_localized": null,
|
|
"severity_value": 3.0,
|
|
"threshold_value": 60.0
|
|
},
|
|
{
|
|
"dynamic_param": null,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": null,
|
|
"severity_value": 2.0,
|
|
"threshold_value": 80.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": false,
|
|
"key": "SHKPI-da-itsi-cp-microsoft-exchange-msexchange-transport-availability",
|
|
"kpi_base_search": "",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-availability)` | stats latest(health_score) AS aggregate",
|
|
"search_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-availability)` | stats latest(health_score) AS aggregate",
|
|
"search_alert": "",
|
|
"search_alert_earliest": "15",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": null,
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-availability)` [| stats count | addinfo | eval search= \"earliest=\" + tostring(info_min_time-(info_max_time-info_min_time))+ \" latest=\" + tostring(info_max_time) |fields search] | addinfo | eval bucket=if(_time<info_max_time-((info_max_time-info_min_time)/2), \"last_window\", \"current_window\") | stats avg(health_score) AS aggregate BY bucket | reverse | delta aggregate AS window_delta | search bucket=current_window | eval window_direction=if(window_delta >0, \"increase\", if(window_delta < 0, \"decrease\", \"none\"))",
|
|
"search_time_series": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-availability)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_aggregate": "`get_full_itsi_summary_service_health_events(da-itsi-cp-microsoft-exchange-msexchange-transport-availability)` | timechart avg(health_score) AS aggregate",
|
|
"search_time_series_entities": "",
|
|
"search_type": "adhoc",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "aggregate",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#AED3E5",
|
|
"base_severity_color_light": "#E3F0F6",
|
|
"base_severity_label": "info",
|
|
"base_severity_value": 1.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "ServiceHealthScore",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "service_health",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 11.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeADTopology"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\"",
|
|
"description": "Provides Active Directory topology information to Exchange services. If this service is stopped, most Exchange services are unable to start.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88, true, true, true)` | eval kpi=\"AD Topology Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88, true, true, true)` | eval kpi=\"AD Topology Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-3245e458c1e8f15f5ee98a88)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeADTopology\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "AD Topology Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeAntispamUpdate"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\"",
|
|
"description": "The Microsoft Forefront Protection 2010 for Exchange Server anti-spam update service.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e, true, true, true)` | eval kpi=\"Anti-Spam Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e, true, true, true)` | eval kpi=\"Anti-Spam Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-fa45c2818cbb722dc785d35e)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeAntispamUpdate\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Anti-Spam Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeEdgeSync"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\"",
|
|
"description": "Replicates configuration and recipient data from the Hub Transport servers to the Edge Transport servers.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c, true, true, true)` | eval kpi=\"Edge Sync Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c, true, true, true)` | eval kpi=\"Edge Sync Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-b4d9b97ff5e804e04ac2d50c)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeEdgeSync\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Edge Sync Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeServiceHost"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\"",
|
|
"description": "Provides a host for several Microsoft Exchange services",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d, true, true, true)` | eval kpi=\"Exchange Service Host\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d, true, true, true)` | eval kpi=\"Exchange Service Host\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-1996d5d54e8a81d2551c640d)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeServiceHost\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Exchange Service Host",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeSubmission"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\"",
|
|
"description": "This service, running on the Mailbox servers, receives the Submit events, processes the messages by converting them from MAPI to MIME, and then hands them over to the Transport service on a Mailbox server.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb, true, true, true)` | eval kpi=\"Exchange Submission Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb, true, true, true)` | eval kpi=\"Exchange Submission Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-82cd11d8587fbba13032dccb)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeSubmission\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Exchange Submission Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeFastSearch"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\"",
|
|
"description": "Drives indexing and querying of data for Exchange.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897, true, true, true)` | eval kpi=\"Fast Search Indexer\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897, true, true, true)` | eval kpi=\"Fast Search Indexer\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-e37adeb9173824fd00278897)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeFastSearch\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Fast Search Indexer",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Inbound_SMTP",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-W3SVC"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\"",
|
|
"description": "Provides Web connectivity and administration through the Internet Information Services Manager",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868, true, true, true)` | eval kpi=\"IIS Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868, true, true, true)` | eval kpi=\"IIS Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-55e3015bfb846e26ef8a4868)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Inbound_SMTP search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-W3SVC\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "IIS Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeDelivery"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\"",
|
|
"description": "This service, running on the Mailbox servers, receives mail items from the Transport service on Mailbox servers, submits them to extension modules for processing, and then commits them into a mailbox database.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9, true, true, true)` | eval kpi=\"Mail Delivery Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9, true, true, true)` | eval kpi=\"Mail Delivery Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-334c381d74fdc3209e7628a9)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeDelivery\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Mail Delivery Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeMailSubmission"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\"",
|
|
"description": "Submits messages from the Mailbox server to the Hub Transport servers.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a, true, true, true)` | eval kpi=\"Mail Submission Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a, true, true, true)` | eval kpi=\"Mail Submission Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-5d2084d9103bf335f27e0f0a)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailSubmission\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Mail Submission Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeMailboxReplication"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\"",
|
|
"description": "The Mailbox Replication Service, MRS, which resides on all Microsoft Exchange Server 2010 Client Access servers, is the service responsible for moving mailboxes, importing and exporting .pst files, and restoring disabled and soft-deleted mailboxes.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc, true, true, true)` | eval kpi=\"Mailbox Replication Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc, true, true, true)` | eval kpi=\"Mailbox Replication Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-398130472a56c769e43bebcc)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeMailboxReplication\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Mailbox Replication Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeProtectedServiceHost"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\"",
|
|
"description": "Microsoft Exchange Protected Service Host service",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1, true, true, true)` | eval kpi=\"Protected Service Host\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1, true, true, true)` | eval kpi=\"Protected Service Host\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-ddc2a057666dba4f6f499ee1)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeProtectedServiceHost\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Protected Service Host",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeTransportLogSearch"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\"",
|
|
"description": "Microsoft Exchange Transport Log Search service.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#FCB64E",
|
|
"base_severity_color_light": "#FEE6C1",
|
|
"base_severity_label": "medium",
|
|
"base_severity_value": 4.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d, true, true, true)` | eval kpi=\"Transport Log Search Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d, true, true, true)` | eval kpi=\"Transport Log Search Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-38a3c9a047f13e21d1e7475d)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransportLogSearch\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Transport Log Search Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
},
|
|
{
|
|
"adaptive_thresholding_training_window": "-7d",
|
|
"adaptive_thresholds_is_enabled": false,
|
|
"aggregate_eval": "",
|
|
"aggregate_statop": "avg",
|
|
"aggregate_threshold_alert_enabled": false,
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"aggregate_thresholds_alert_enabled": true,
|
|
"aggregate_thresholds_custom_alert_enabled": false,
|
|
"aggregate_thresholds_custom_alert_rules": [],
|
|
"alert_eval": "",
|
|
"alert_lag": "30",
|
|
"alert_on": "both",
|
|
"alert_period": "5",
|
|
"anomaly_detection_alerting_enabled": false,
|
|
"anomaly_detection_is_enabled": false,
|
|
"anomaly_detection_sensitivity": null,
|
|
"anomaly_detection_training_window": null,
|
|
"backfill_earliest_time": "-7d",
|
|
"backfill_enabled": false,
|
|
"base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\"",
|
|
"base_search_id": null,
|
|
"base_search_metric": null,
|
|
"cohesive_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"cohesive_anomaly_detection_is_enabled": false,
|
|
"datamodel": {
|
|
"datamodel": "Microsoft_Exchange",
|
|
"field": "componentValue",
|
|
"object": "Transport_Handling",
|
|
"owner_field": "Microsoft_Exchange_Health.componentValue"
|
|
},
|
|
"datamodel_filter": [
|
|
{
|
|
"field": "Microsoft_Exchange_Health.componentId",
|
|
"operator": "=",
|
|
"value": "WinHostMon-MSExchangeTransport"
|
|
}
|
|
],
|
|
"datamodel_filter_clauses": "Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\"",
|
|
"description": "Microsoft Exchange Transport service.",
|
|
"enabled": true,
|
|
"entity_filter_field": "host",
|
|
"entity_split_field": "host",
|
|
"entity_statop": "avg",
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#F26A35",
|
|
"base_severity_color_light": "#FBCBB9",
|
|
"base_severity_label": "high",
|
|
"base_severity_value": 5.0,
|
|
"gauge_max": 1,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 1.1,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": [
|
|
{
|
|
"dynamic_param": 0.0,
|
|
"severity_color": "#99D18B",
|
|
"severity_color_light": "#DCEFD7",
|
|
"severity_label": "normal",
|
|
"severity_label_localized": "Normal",
|
|
"severity_value": 2.0,
|
|
"threshold_value": 1.0
|
|
}
|
|
]
|
|
},
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": 0.0,
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"is_filter_entities_to_service": false,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f",
|
|
"kpi_base_search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\"",
|
|
"kpi_template_kpi_id": "",
|
|
"kpi_threshold_template_id": "",
|
|
"metric_qualifier": null,
|
|
"metric_search_spec": {
|
|
"metric_index": "",
|
|
"metric_name": ""
|
|
},
|
|
"search": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f, true, true, true)` | eval kpi=\"Transport Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f)`",
|
|
"search_alert": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity(avg, Microsoft_Exchange_Health.componentValue, \"host\")` | eval sec_grp = \"default_itsi_security_group\" | `match_entities(host, sec_grp)` | eval serviceid = \"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `aggregate_entity_into_service(avg)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f, true, true, true)` | eval kpi=\"Transport Service\", urgency=\"5\", alert_period=\"5\", serviceid=\"da-itsi-cp-microsoft-exchange-msexchange-transport-availability\" | `assess_urgency` | `gettime`",
|
|
"search_alert_earliest": "5",
|
|
"search_alert_entities": "",
|
|
"search_buckets": "",
|
|
"search_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_single_value(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f)`",
|
|
"search_occurrences": 1.0,
|
|
"search_time_compare": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_and_compare(avg, avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f)`",
|
|
"search_time_series": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f)`",
|
|
"search_time_series_aggregate": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)` | `aggregate_entity_into_service_time_series(avg, 5)` | `assess_severity(da-itsi-cp-microsoft-exchange-msexchange-transport-availability, da-itsi-cp-microsoft-exchange-6788244413e4b0bf7452879f)`",
|
|
"search_time_series_entities": "| datamodel Microsoft_Exchange Transport_Handling search | search Microsoft_Exchange_Health.componentId=\"WinHostMon-MSExchangeTransport\" | `aggregate_raw_into_limited_entity_time_series(avg, Microsoft_Exchange_Health.componentValue, \"host\", 5)`",
|
|
"search_type": "datamodel",
|
|
"service_title": "MSExchange_Transport_Availability",
|
|
"threshold_eval": "",
|
|
"threshold_field": "Microsoft_Exchange_Health.componentValue",
|
|
"time_policies": {
|
|
"policies": {
|
|
"default_policy": {
|
|
"aggregate_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"entity_thresholds": {
|
|
"base_severity_color": "#99D18B",
|
|
"base_severity_color_light": "#DCEFD7",
|
|
"base_severity_label": "normal",
|
|
"base_severity_value": 2.0,
|
|
"gauge_max": 100,
|
|
"gauge_min": 0,
|
|
"is_max_static": false,
|
|
"is_min_static": true,
|
|
"metric_field": "count",
|
|
"render_boundary_max": 100.0,
|
|
"render_boundary_min": 0.0,
|
|
"threshold_levels": []
|
|
},
|
|
"policy_type": "static",
|
|
"time_blocks": [],
|
|
"title": "Default"
|
|
}
|
|
}
|
|
},
|
|
"title": "Transport Service",
|
|
"trending_ad": {
|
|
"sensitivity": 8
|
|
},
|
|
"type": "kpis_primary",
|
|
"tz_offset": null,
|
|
"unit": "",
|
|
"urgency": 5.0,
|
|
"use_time_policies": false
|
|
}
|
|
],
|
|
"service_tags": {
|
|
"tags": [],
|
|
"template_tags": []
|
|
},
|
|
"service_template_id": "",
|
|
"services_depending_on_me": [
|
|
{
|
|
"kpis_depending_on": [
|
|
"SHKPI-da-itsi-cp-microsoft-exchange-msexchange-transport-availability"
|
|
],
|
|
"service_id": "da-itsi-cp-microsoft-exchange-msexchange-transport"
|
|
}
|
|
],
|
|
"services_depends_on": [],
|
|
"team_id": "default_itsi_security_group",
|
|
"title": "MSExchange_Transport_Availability",
|
|
"version": "0.0.33"
|
|
} |